Private IP and the VPN secure client

[brent.smith]

Is it possible for a "VPN Secure Client" that is located on a network that is using a private IP schema (like 10.1.1.1), to VPN using IPSec across the Internet and into a PIX firewall that has been configured with Crypto?? It is my understanding that IPSec will not allow the client to come from a NATed address??

[afakhan]

Hi,

Cisco secure vpn client will only work for routable IP address OR static NATed IP address, BUT vpn3000 client can use IPSec/UDP (to pix or router) and IPSec/UDP or IPSec/TCp (to VPN3000) to circumvent the NAT device.

VPN3000 concentrator code : ipsec/tcp or ipsec/udp (v3.5 or above)

IOS : ipsec/udp : 12.2.13T

PIX : ipsec/udp : 6.3.1

Thx

Afaq